Repositories list

• KEV

  Public
  Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

  exploitsvulnerability0day+ 2cisacisa-kev

  Apache License 2.0

  •36•554•0•0•Updated Jan 10, 2025Jan 10, 2025

• oxo

  Public
  OXO is a security scanning orchestrator for the modern age.

  securityscannersecurity-scanner+ 1security-tools

  Python

  •

  Apache License 2.0

  •54•533•0•0•Updated Jan 10, 2025Jan 10, 2025

• agent_whatweb

  Public
  Agent responsible for fingerprinting websites.

  securityscannerostorlab

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Jan 10, 2025Jan 10, 2025

• KB

  Public
  Knowledge Base collects, stores, and retrieves known vulnerabilities.

  securityostorlab

  Python

  •

  Apache License 2.0

  •1•7•0•0•Updated Jan 9, 2025Jan 9, 2025

• oxotitan

  Public
  UI of the OXO open-source Vulnerability Scanner.

  vulnerability-scanners

  Vue

  •

  Apache License 2.0

  •0•4•0•0•Updated Jan 7, 2025Jan 7, 2025

• agent_tracker

  Public
  Agent responsible for tracking a scan in the local runtime.

  agentostorlab

  Python

  •

  Apache License 2.0

  •1•3•0•0•Updated Jan 3, 2025Jan 3, 2025

• agent_asteroid

  Public
  Agent responsible for detecting remote vulnerabilities, a robust scanner.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •5•22•0•0•Updated Dec 25, 2024Dec 25, 2024

• agent_metasploit

  Public
  Agent metasploit

  PowerShell

  •

  Apache License 2.0

  •0•2•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_whois_ip

  Public
  Agent responsible for retrieving registry and information of an IP.

  Python

  •

  Apache License 2.0

  •1•1•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_tsunami

  Public
  Agent responsible for detecting high severity vulnerabilities with high confidence using Tsunami.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •0•6•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_amass

  Public
  Agent for OWASP for network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_dnsx

  Public
  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_openvas

  Public
  Agent responsible for network security and vulnerability scanning using OpenVas.

  agentsecurityscanner+ 1ostorlab

  Shell

  •

  Apache License 2.0

  •3•5•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_subfinder

  Public
  Agent implementation of Subfinder. subdomain discovery tool that discovers valid subdomains for websites.

  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_nmap

  Public
  Agent responsible for network discovery and security auditing using Nmap.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •2•20•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_whois_domain

  Public
  Agent responsible for retrieving WHOIS information of a domain.

  agentwhoiswhois-lookup+ 1ostorlab

  Python

  •

  Apache License 2.0

  •1•2•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_nuclei

  Public
  Agent responsible for fast vulnerability scanning using Nuclei.

  agentsecurityscanner+ 1ostorlab

  Python

  •

  Apache License 2.0

  •2•9•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_nebula

  Public
  The Nebula Agent is responsible of persisting all types of messages locally.

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_zap

  Public
  Agent implementation of the Zed Attack Proxy (ZAP) security scanner. ZAP is a very popular web scanner and proxy maintained by the OWASP org.

  Python

  •

  Apache License 2.0

  •2•8•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_virustotal

  Public
  Agent responsible for scanning files using the Virus Total public API.

  agentsecurityscanner+ 2malware-analysisostorlab

  Python

  •

  Apache License 2.0

  •1•6•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_all_tlds

  Public
  Injects all domains names of all known TLD from a source domain.

  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 6, 2024Dec 6, 2024

• agent_trufflehog

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 3, 2024Dec 3, 2024

• agent_semgrep

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 3, 2024Dec 3, 2024

• agent_inject_asset

  Public
  Agent responsible for injecting an asset into the bus from the runtime.

  agentsecurityostorlab

  Python

  •

  Apache License 2.0

  •0•2•0•0•Updated Dec 3, 2024Dec 3, 2024

• agent_local_persist_vulnz

  Public
  Agent responsible for persisting vulnerabilities in the local runtime.

  agentsecurityostorlab

  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 3, 2024Dec 3, 2024

• agent_debug

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 3, 2024Dec 3, 2024

• agent_osv

  Public
  OSV Agent to find existing vulnerabilities affecting projects dependencies

  Python

  •

  Apache License 2.0

  •0•4•0•0•Updated Dec 3, 2024Dec 3, 2024

• agent_ip2geo

  Public
  Ostorlab agent geolocating IP addresses.

  Python

  •

  Apache License 2.0

  •1•1•0•0•Updated Dec 3, 2024Dec 3, 2024

• gitlabci

  Public
  This is the source repository to build the docker image to be used within GitLab CI. This image gives you the ability to integrate Ostorlab automonomus security testing for Android and iOS mobile apps to your build process.

  Shell

  •

  Apache License 2.0

  •2•1•0•0•Updated Nov 14, 2024Nov 14, 2024

• template_agent

  Public template
  Repository of the agents base template.

  Python

  •

  Apache License 2.0

  •3•5•0•0•Updated Sep 30, 2024Sep 30, 2024